Coyote malware is first-ever malware abusing Windows UI Automation
Coyote malware is first-ever malware abusing Windows UI Automation Pierluigi Paganini July 24, 2025 New Coyote malware uses Windows UI Automation to steal banking credentials,…
Category: Securityaffairs
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacks
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacks Pierluigi Paganini July 24, 2025 SonicWall addressed a critical vulnerability, tracked as…
Stealth backdoor found in WordPress mu-Plugins folder
Stealth backdoor found in WordPress mu-Plugins folder Pierluigi Paganini July 24, 2025 A new stealth backdoor has been discovered in the WordPress mu-plugins folder, granting…
U.S. CISA adds CrushFTP, Google Chromium, and SysAid flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds CrushFTP, Google Chromium, and SysAid flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 24, 2025 U.S. CISA adds CrushFTP, Google…
U.S. CISA urges FCEB agencies to fix two Microsoft SharePoint flaws immediately and added them to its Known Exploited Vulnerabilities catalog
U.S. CISA urges FCEB agencies to fix two Microsoft SharePoint flaws immediately and added them to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 23,…
Sophos fixed two critical Sophos Firewall vulnerabilities
Sophos fixed two critical Sophos Firewall vulnerabilities Pierluigi Paganini July 23, 2025 Sophos addressed five Sophos Firewall vulnerabilities that could allow remote attackers to execute…
French Authorities confirm XSS.is admin arrested in Ukraine
French Authorities confirm XSS.is admin arrested in Ukraine Pierluigi Paganini July 23, 2025 French authorities announced the arrest in Ukraine of an alleged administrator of…
Microsoft linked attacks on SharePoint flaws to China-nexus actors
Microsoft linked attacks on SharePoint flaws to China-nexus actors Pierluigi Paganini July 23, 2025 Microsoft linked SharePoint exploits to China-nexus groups Linen Typhoon, Violet Typhoon,…
Cisco confirms active exploitation of ISE and ISE-PIC flaws
Cisco confirms active exploitation of ISE and ISE-PIC flaws Pierluigi Paganini July 22, 2025 Cisco warns of active exploits targeting Identity Services Engine (ISE) and…
new ToolShell attacks target enterprises
SharePoint under fire: new ToolShell attacks target enterprises Pierluigi Paganini July 22, 2025 While SentinelOne did not attribute the attack to a specific threat actor,…
Hardcoded credentials found in HPE Aruba Instant On Wi-Fi devices
Hardcoded credentials found in HPE Aruba Instant On Wi-Fi devices Pierluigi Paganini July 22, 2025 Hardcoded credentials in HPE Aruba Instant On Wi-Fi devices, let…
MuddyWater deploys new DCHSpy variants amid Iran-Israel conflict
MuddyWater deploys new DCHSpy variants amid Iran-Israel conflict Pierluigi Paganini July 21, 2025 Iran-linked APT MuddyWater is deploying new DCHSpy spyware variants to target Android…